Privacy Policy & DPA

A. Who We Are

QuickSeater, operated by MOT Enterprise Group SRL ("we," "us"), provides table-reservation software to restaurants. This policy covers data collected when you create a Restaurant account, when you book a table through a Restaurant's QuickSeater page, or when you contact us directly.

B. Controller vs. Processor

For a Restaurant's own account data (business details, login credentials, billing and subscription data), QuickSeater is the data controller. For guest/diner data entered into the platform by a Restaurant, the Restaurant is the data controller and QuickSeater is the data processor, acting under the Data Processing Agreement in Part 1.

C. Information We Collect

• Restaurant accounts:Restaurant/business name, login username and hashed password, business address, contact phone number, restaurant email address, opening hours, website and social media links, restaurant photo, floor plan/table layout, and — for Restaurants on a paid plan — billing details processed via Stripe (see Section E).
• Guests / diners:First and last name, email address, phone number, and reservation details (date, time, party size), plus booking history used to calculate a reliability indicator (see Section G). Some of this is provided directly by the guest; some is entered on their behalf by Restaurant staff.
• Automatically collected:IP address and basic technical request logs, used only for security purposes such as rate-limiting and blocking abusive traffic — not for tracking, advertising, or analytics profiles. See Section H on cookies.
• Correspondence:Name, work email, restaurant name, and message content submitted through our "Contact Us" form.

We do not collect full payment card numbers directly — for Restaurant subscription payments, card details are collected and stored by Stripe, our payment processor (see Section E). We do not collect voice or call recordings. If we introduce features that require additional data — such as a phone-based booking assistant — we will update this policy, and identify any new sub-processor, before that data collection begins.

D. How We Use Your Information

• To create and manage Restaurant accounts — performance of a contract.
• To create, manage, and fulfil table reservations — performance of a contract with the Restaurant.
• To send booking confirmations and reminders by email and SMS, and to notify Restaurant owners of new bookings — performance of a contract; legitimate interest in reducing no-shows.
• To process subscription payments when a Restaurant upgrades their plan — performance of a contract; legal obligation (accounting/tax).
• To calculate a guest reliability indicator from booking history — legitimate interest in helping Restaurants manage no-show risk (see Section G).
• To respond to enquiries submitted through our contact form — legitimate interest / consent.
• To keep the platform secure and available, including detecting abuse and rate-limiting requests — legitimate interest; legal obligation.

E. Payment Processing (Stripe)

When a Restaurant upgrades to a paid plan, we use Stripe to process the payment. Stripe collects and stores the full card details directly — QuickSeater's own servers never receive or store your complete card number. We receive limited billing information back from Stripe, such as billing name and address, card brand, last 4 digits, expiry date, and subscription/invoice status, which we use to manage the subscription and show billing history in the dashboard.

F. SMS & Email Communications

We use a guest's phone number and email address to send reservation-related messages — booking confirmations, reminders, and reconfirmation requests — using our email delivery provider and our SMS delivery provider (see Part 1, Section D). These are service messages tied to a specific booking, not marketing.

Standard message and data rates from your mobile carrier may apply to SMS messages. If you'd prefer not to receive SMS reminders, contact the Restaurant you booked with or contact us directly — note that opting out may affect a Restaurant's ability to confirm or remind you about a booking. If we ever send marketing communications (for example, to Restaurant owners about new features), you will always be able to unsubscribe using a link in the message or by contacting us.

G. Automated Processing: Guest Reliability Indicator

When a guest makes a reservation, our platform calculates a reliability indicator from that guest's booking history (completed, cancelled, and missed reservations), which Restaurants may use to decide whether to request a reconfirmation for a booking. This indicator is informational only — it does not automatically cancel a reservation, apply any charge, or take any other action without a member of the Restaurant's staff reviewing it.

H. Cookies & Local Storage

QuickSeater's own platform does not use cookies for tracking, advertising, or analytics, and we do not run third-party analytics or advertising scripts. When you log in to a Restaurant account, we store a security token in your browser's local storage to keep you signed in — this token is never shared with third parties and is cleared when you log out or clear your browser data.

When a Restaurant completes a subscription payment, Stripe's checkout may set its own cookies as part of its fraud-prevention and security systems. Those cookies are set and controlled by Stripe, not QuickSeater, and are governed by Stripe's own privacy and cookie policy.

I. How We Share Your Information

We do not sell personal data. We share it only with:

• The Restaurant a guest books with, since the Restaurant is the data controller for that booking.
• Service providers who process data on our behalf under contract: our hosting/infrastructure provider, our transactional email provider, our SMS delivery provider, and Stripe for Restaurant subscription payments only — listed as sub-processors in Part 1, Section D.
• Authorities, where required by law, to protect our legal rights, or to prevent fraud or abuse.
• A successor organization, if QuickSeater is involved in a merger, acquisition, or sale of assets — we will notify affected account holders of any resulting change in ownership or use of their personal data.

J. International Data Transfers

Some of our sub-processors — including Stripe — may process data outside the UK. Where this happens, we ensure appropriate safeguards are in place, such as the UK's International Data Transfer Addendum or the sub-processor's own standard contractual clauses, to keep your data protected to UK standards.

K. Data Retention

• Restaurant account data is retained while the account is active, and for a reasonable period afterward for legal, accounting, and dispute-resolution purposes.
• Payment and billing records are retained for as long as required by UK tax and accounting law (typically up to 6 years), even after an account is closed.
• Guest and reservation data is retained for as long as instructed by the Restaurant or as needed to provide the service. We aim to delete or anonymize it within 30 days of a Restaurant's account closure or a valid deletion request, except where we must retain it longer to comply with the law.
• Technical security logs (e.g. IP addresses collected for rate-limiting) are kept only briefly — typically no more than 90 days — before being deleted.
• Contact-form enquiries are retained only as long as needed to resolve them.

L. Your Rights

Subject to UK GDPR, you have the right to access, correct, delete, or restrict the use of your personal data, to object to certain processing, to receive your data in a portable format, and to withdraw consent where processing relies on it.

M. Children's Privacy

QuickSeater is intended for use by adults booking or managing restaurant reservations. We do not knowingly collect personal data from children. If you believe a child has provided us with personal data, please contact us and we will delete it.

N. Changes to This Policy

We may update this policy as QuickSeater's features change. We will update the "Last Updated" date above, and for material changes affecting how we use previously collected data, we will take reasonable steps to notify Restaurant account holders before the change takes effect.

O. Contact Us & Complaints

Questions about this policy or how your data is handled can be sent to contact@quickseater.com. If you're unhappy with how we've handled your personal data, you have the right to complain to the UK's supervisory authority, the Information Commissioner's Office (ICO), or the data protection authority in your own country of residence.